CVE-2021-3759

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-08-23 · updated 2026-10-14
Weakness: CWE-400

Description

A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.

Affected products

Debian Linux: 10.0
Linux kernel: all versions

References

https://access.redhat.com/security/cve/CVE-2021-3759
https://bugzilla.redhat.com/show_bug.cgi?id=1999675
https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
https://lore.kernel.org/linux-mm/1626333284-1404-1-git-send-email-nglaive%40gmail.com/
https://access.redhat.com/security/cve/CVE-2021-3759
https://bugzilla.redhat.com/show_bug.cgi?id=1999675
https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
https://lore.kernel.org/linux-mm/1626333284-1404-1-git-send-email-nglaive%40gmail.com/
https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Get alerted when CVE-2021-3759 or the next vulnerability affects your stack